The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an…
Priority MEDIUM 40CWE-119Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- Partial Red Hat: 5 fixed, 7 without a fix
Attack profile from CVSS 2.0 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-119 and the CVSS impact.
Summary
The yaml_parser_scan_tag_uri function in scanner.c in LibYAML before 0.1.5 performs an incorrect cast, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via crafted tags in a YAML document, which triggers a heap-based buffer overflow.
Why it matters now
EPSS 0.07386 94th percentileScored 2026-11-07
Fix Partial libyaml (npm): 0.2.3Red Hat: 5 advisoriesRed Hat: 5 fixed, 7 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | libyaml (npm) | before 0.2.3 | 0.2.3 | Patch available | GHSA-m75h-cghq-c8h5 |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- libyaml (npm) Vendor— Affected before 0.2.3 Fixed in 0.2.3 Patch available GHSA-m75h-cghq-c8h5
CPE configurations NVD · 16
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:pyyaml:libyaml:*:*:*:*:*:*:*:* | up to 0.1.4 | Vulnerable | Pyyaml |
| cpe:2.3:a:pyyaml:libyaml:0.0.1:*:*:*:*:*:*:* | 0.0.1 | Vulnerable | Pyyaml |
| cpe:2.3:a:pyyaml:libyaml:0.1.1:*:*:*:*:*:*:* | 0.1.1 | Vulnerable | Pyyaml |
| cpe:2.3:a:pyyaml:libyaml:0.1.2:*:*:*:*:*:*:* | 0.1.2 | Vulnerable | Pyyaml |
| cpe:2.3:a:pyyaml:libyaml:0.1.3:*:*:*:*:*:*:* | 0.1.3 | Vulnerable | Pyyaml |
| cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:* | 12.04 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:* | 12.10 | Vulnerable | Canonical |
| cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:* | 13.10 | Vulnerable | Canonical |
| cpe:2.3:a:redhat:openstack:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Red Hat |
| cpe:2.3:a:redhat:openstack:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Red Hat |
- cpe:2.3:a:pyyaml:libyaml:*:*:*:*:*:*:*:* Versions up to 0.1.4 Vulnerable ·Pyyaml
- cpe:2.3:a:pyyaml:libyaml:0.0.1:*:*:*:*:*:*:* Versions 0.0.1 Vulnerable ·Pyyaml
- cpe:2.3:a:pyyaml:libyaml:0.1.1:*:*:*:*:*:*:* Versions 0.1.1 Vulnerable ·Pyyaml
- cpe:2.3:a:pyyaml:libyaml:0.1.2:*:*:*:*:*:*:* Versions 0.1.2 Vulnerable ·Pyyaml
- cpe:2.3:a:pyyaml:libyaml:0.1.3:*:*:*:*:*:*:* Versions 0.1.3 Vulnerable ·Pyyaml
- cpe:2.3:o:canonical:ubuntu_linux:12.04:*:*:*:lts:*:*:* Versions 12.04 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:12.10:*:*:*:*:*:*:* Versions 12.10 Vulnerable ·Canonical
- cpe:2.3:o:canonical:ubuntu_linux:13.10:*:*:*:*:*:*:* Versions 13.10 Vulnerable ·Canonical
- cpe:2.3:a:redhat:openstack:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Red Hat
- cpe:2.3:a:redhat:openstack:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat
Show 6 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Debian |
| cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* | 7.0 | Vulnerable | Debian |
| cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:* | 42.1 | Vulnerable | openSUSE |
| cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:* | 11.4 | Vulnerable | openSUSE |
| cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:* | 13.1 | Vulnerable | openSUSE |
| cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:* | 13.2 | Vulnerable | openSUSE |
- cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Debian
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:* Versions 7.0 Vulnerable ·Debian
- cpe:2.3:o:opensuse:leap:42.1:*:*:*:*:*:*:* Versions 42.1 Vulnerable ·openSUSE
- cpe:2.3:o:opensuse:opensuse:11.4:*:*:*:*:*:*:* Versions 11.4 Vulnerable ·openSUSE
- cpe:2.3:o:opensuse:opensuse:13.1:*:*:*:*:*:*:* Versions 13.1 Vulnerable ·openSUSE
- cpe:2.3:o:opensuse:opensuse:13.2:*:*:*:*:*:*:* Versions 13.2 Vulnerable ·openSUSE
Remediation
- Fix · GHSA-m75h-cghq-c8h5 libyaml (npm) Fixed in 0.2.3 Advisory →
Red Hat 5 advisories
- RHSA-2014:0415 Released 2014-04-17 · Red Hat rating Importantlibyaml security update
- Red Hat Common for RHEL Server (v. 6) libyaml-0.1.3-1.4.el6, libyaml-devel-0.1.3-1.4.el6
- RHSA-2014:0364 Released 2014-04-03 · Red Hat rating Importantruby193-libyaml security update
- Red Hat Enterprise Linux OpenStack Platform 3.0 ruby193-libyaml-0.1.4-5.1.el6, ruby193-libyaml-devel-0.1.4-5.1.el6
- RHSA-2014:0353 Released 2014-04-02 · Red Hat rating Importantlibyaml security update
- Red Hat Enterprise Linux OpenStack Platform 3.0 libyaml-0.1.3-1.4.el6, libyaml-devel-0.1.3-1.4.el6
Show 2 more Red Hat advisories
- RHSA-2014:0354 Released 2014-04-02 · Red Hat rating Importantlibyaml security update
- Red Hat Enterprise Linux OpenStack Platform 4.0 libyaml-0.1.3-1.4.el6, libyaml-devel-0.1.3-1.4.el6
- RHSA-2014:0355 Released 2014-04-02 · Red Hat rating Importantruby193-libyaml security update
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6) ruby193-libyaml-0.1.4-5.1.el6, ruby193-libyaml-devel-0.1.4-5.1.el6
- Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6) ruby193-libyaml-0.1.4-5.1.el6, ruby193-libyaml-devel-0.1.4-5.1.el6
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| OpenShift Enterprise 1 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux 6 | Affected | No fix yet |
| Red Hat Enterprise MRG 1 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise MRG 2 | Affected | No fix planned: Will not fix |
| Red Hat Satellite 5 | Affected | No fix planned: Will not fix |
| Red Hat Software Collections | Affected | No fix yet |
| Red Hat Subscription Asset Manager | Affected | No fix planned: Will not fix |
| Red Hat Common for RHEL Server (v. 6) | Fixed | RHSA-2014:0415 |
| Red Hat Enterprise Linux OpenStack Platform 3.0 | Fixed | RHSA-2014:0353, RHSA-2014:0364 |
| Red Hat Enterprise Linux OpenStack Platform 4.0 | Fixed | RHSA-2014:0354 |
| Red Hat Software Collections 1 for Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2014:0355 |
| Red Hat Software Collections 1 for Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2014:0355 |
Not affected: 3 products
- CloudForms Management Engine 5
- Red Hat Enterprise Linux 7
- Red Hat Satellite 6
Timeline
- 2026-10-02 Threatist record created from CVE-2013-6393
- 2026-10-03 Alias added: GHSA-m75h-cghq-c8h5
References
Advisory 16
- openSUSE-SU-2014:0273
- DSA-2870
- APPLE-SA-2014-10-16-3
- APPLE-SA-2014-04-22-1
- MDVSA-2015:060
- http://advisories.mageia.org/MGASA-2014-0040.html
- openSUSE-SU-2015:0319
- RHSA-2014:0355
- openSUSE-SU-2014:0272
- RHSA-2014:0354
- https://support.apple.com/kb/HT6536
- openSUSE-SU-2016:1067
- DSA-2850
- RHSA-2014:0353
- USN-2098-1
- https://nvd.nist.gov/vuln/detail/CVE-2013-6393
Other 10
- 102716
- https://bugzilla.redhat.com/attachment.cgi?id=847926&action=diff
- https://bitbucket.org/xi/libyaml/commits/tag/0.1.5
- https://puppet.com/security/cve/cve-2013-6393
- https://bitbucket.org/xi/libyaml
- https://bitbucket.org/xi/libyaml/commits/bce8b60f0b9af69fa9fab3093d0a41ba243de048
- https://web.archive.org/web/20140302205713/http://www.securityfocus.com/bid/65258
- https://web.archive.org/web/20150523055002/http://www.mandriva.com/en/support/security/advisories/advisory/MDVSA-2015:060/?name=MDVSA-2015:060
- https://www.npmjs.com/advisories/21
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=2013-6393
Sources
- CVE-2013-6393 · CVE Program
- CVE-2013-6393 · NVD
- FIRST EPSS
- GHSA-m75h-cghq-c8h5 · GitHub Advisory Database · CC BY 4.0
- CVE-2013-6393 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences